UDP traffic

Datagrams matching asn:3215 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Other services

23 datagrams from 15 sources

First packets of sessions with VPN, voice, tunnelling, database and management services.

SOCKS5 23

Latest SOCKS5 datagram, to 22003/udp

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 06 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

Unrecognised

24 datagrams from 15 sources

Datagrams no decoder recognised. Their first bytes are kept.

Unrecognised 24

Latest Unrecognised datagram, to 37971/udp

·(·V·r ·4Vx·O·1·H

payload bytes

00000000  01 a0 14 28 d1 56 91 72  0d 00 ff ff 00 fe fe fe  |...(.V.r........|
00000010  fe fd fd fd fd 12 34 56  78 db 0f 4f a8 8f 31 15  |......4Vx..O..1.|
00000020  48                                                |H|

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
Memcached	11211/udp	1	1	10,000 to 51,000

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

Networks

AS3215 Orange from 26 sources47

Countries

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
86.252.45.174	AS3215 Orange	FR	SOCKS5	4	2026-10-09 01:31
90.73.208.73	AS3215 Orange	FR	Unrecognised	4	2026-10-10 22:46
109.221.246.15	AS3215 Orange	FR	SOCKS5	3	2026-10-07 12:07
2.12.43.124	AS3215 Orange	FR	SOCKS5	3	2026-10-07 22:04
82.127.126.14	AS3215 Orange	FR	SOCKS5	3	2026-10-09 20:38
82.120.147.243	AS3215 Orange	FR	Unrecognised	3	2026-10-07 14:20
83.200.225.79	AS3215 Orange	FR	Unrecognised	3	2026-10-10 00:44
90.52.184.55	AS3215 Orange	FR	Unrecognised	2	2026-10-05 19:01
90.76.85.88	AS3215 Orange	FR	Unrecognised	2	2026-10-09 13:02
92.142.110.25	AS3215 Orange	GF	SOCKS5	2	2026-10-07 01:37
90.51.142.7	AS3215 Orange	FR	Unrecognised	2	2026-10-07 04:21
83.204.12.141	AS3215 Orange	FR	Unrecognised	2	2026-10-05 18:15
82.121.167.49	AS3215 Orange	FR	Unrecognised	1	2026-10-06 06:22
90.62.241.177	AS3215 Orange	FR	SOCKS5	1	2026-10-06 11:23
82.127.132.221	AS3215 Orange	FR	Unrecognised	1	2026-10-08 19:44
92.170.191.59	AS3215 Orange	FR	Unrecognised	1	2026-10-07 00:18
92.148.162.128	AS3215 Orange	FR	SOCKS5	1	2026-10-08 10:55
82.121.168.35	AS3215 Orange	FR	SOCKS5	1	2026-10-09 14:02
2.11.114.114	AS3215 Orange	FR	Unrecognised	1	2026-10-05 13:46
86.220.129.59	AS3215 Orange	FR	SOCKS5	1	2026-10-09 09:20

Latest datagrams

2026-10-10 22:46:1390.73.208.73to 37971/udpUnrecognisedFR

·(·V·r ·4Vx·O·1·H

payload bytes

00000000  01 a0 14 28 d1 56 91 72  0d 00 ff ff 00 fe fe fe  |...(.V.r........|
00000010  fe fd fd fd fd 12 34 56  78 db 0f 4f a8 8f 31 15  |......4Vx..O..1.|
00000020  48                                                |H|

2026-10-10 07:50:322.13.43.40to 22003/udpSOCKS5FR

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 06 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-10 01:24:5386.242.146.166to 57636/udpUnrecognisedFR

u· ·ڠeQ·޴·!I8ܧ5·*·6N·:·y·.·I·Q·8k·K'·վ·=·hrH·,-·*·mu;J·-·n"·"·1F O23·3· U·.·I·b·6·:·Va·

payload bytes

00000000  75 fb 09 e1 da a0 65 51  e2 de b4 81 f3 21 49 38  |u.....eQ.....!I8|
00000010  dc a7 35 96 b0 a6 2a ea  d9 36 4e cd 3a d0 79 bc  |..5...*..6N.:.y.|
00000020  2e 8b 49 87 51 a2 e9 38  6b a3 ad 84 c4 4b 27 f6  |..I.Q..8k....K'.|
00000030  d5 be fc 3d 11 68 72 48  8f 2c 2d a1 05 2a 98 6d  |...=.hrH.,-..*.m|
00000040  75 3b 4a b5 2d ff a3 6e  22 ef 22 a6 e1 31 46 0a  |u;J.-..n"."..1F.|
00000050  4f 32 33 ee 33 e2 18 9f  0d 55 f2 2e 0b a0 00 15  |O23.3....U......|
00000060  ae 49 d6 62 bd 36 87 3a  dd 56 61 86 e2 be 71 96  |.I.b.6.:.Va...q.|
00000070  bb 0e 3a 46 1f ea 0b 45  dd 8b 50 c9 bb ba cd d2  |..:F...E..P.....|
00000080  8f 39 14 44 00 78 55 5e  74 1e 16 13 cf 66 b1 ac  |.9.D.xU^t....f..|
00000090  97 ea 8c 49 de 0e ec bc  89 42 aa 1f ad d8 0a 38  |...I.....B.....8|
000000a0  69 55 fc 16 96 33 ba ca  42 9e 49 87 b6 f1 e8 e9  |iU...3..B.I.....|
000000b0  ff a6 4b 1d 43 00 76 06  41 35 06 cd 16 08 cd 63  |..K.C.v.A5.....c|
000000c0  ce 26 f1 23 eb 4e 33 95  31 cd 63 69 b3 f5 e5 62  |.&.#.N3.1.ci...b|
000000d0  77 68 88 c8 9b 23 c3 c7  17 74 be b0 de 47 bb fd  |wh...#...t...G..|
000000e0  ce 43 fb 76 71 69 fa a8  b5 ae a7 eb a8 81 05 cc  |.C.vqi..........|
000000f0  d5 4e 4c 60 4c 12 86 1b  8f c5 82 cd 56 15 6a 2d  |.NL`L.......V.j-|
... 512 bytes shown in part

2026-10-10 00:44:3183.200.225.79to 32434/udpUnrecognisedFR

·g·!·J·4Vx·\

payload bytes

00000000  01 a4 67 e9 16 ef 21 e9  4a 00 ff ff 00 fe fe fe  |..g...!.J.......|
00000010  fe fd fd fd fd 12 34 56  78 a4 80 ac ae be 1a e0  |......4Vx.......|
00000020  5c                                                |\|

2026-10-09 20:38:0182.127.126.14to 443/udpSOCKS5FR

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 06 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-09 17:20:3790.15.212.61to 30443/udpSOCKS5GP

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 06 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-09 17:14:4990.73.208.73to 44017/udpUnrecognisedFR

·u|·4VxP·OȬ·r·

payload bytes

00000000  01 b5 13 bd da 75 7c a6  99 00 ff ff 00 fe fe fe  |.....u|.........|
00000010  fe fd fd fd fd 12 34 56  78 50 b1 4f c8 ac 90 72  |......4VxP.O...r|
00000020  18                                                |.|

2026-10-09 14:02:4582.121.168.35to 41034/udpSOCKS5FR

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 0b 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-09 13:02:1490.76.85.88to 50298/udpUnrecognisedFR

·Թ·"L·3·4VxD#n·8·

payload bytes

00000000  01 11 d4 b9 ba 22 4c fb  33 00 ff ff 00 fe fe fe  |....."L.3.......|
00000010  fe fd fd fd fd 12 34 56  78 44 23 6e 98 1e ca 38  |......4VxD#n...8|
00000020  a9                                                |.|

2026-10-09 09:20:1986.220.129.59to 32803/udpSOCKS5FR

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 08 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-09 09:00:5082.127.126.14to 443/udpSOCKS5FR

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 08 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part

2026-10-09 07:15:5990.76.85.88to 27708/udpUnrecognisedFR

·F·-_Z KG·4Vx·3~·

payload bytes

00000000  01 46 14 2d 5f 5a 0d 4b  47 00 ff ff 00 fe fe fe  |.F.-_Z.KG.......|
00000010  fe fd fd fd fd 12 34 56  78 8a ea 33 7e 00 cc cd  |......4Vx..3~...|
00000020  c2                                                |.|

2026-10-09 01:31:3386.252.45.174to 36539/udpUnrecognisedFR

·{$·o·4Vx·h·=·8·

payload bytes

00000000  01 17 b4 a4 7b 24 81 a6  6f 00 ff ff 00 fe fe fe  |....{$..o.......|
00000010  fe fd fd fd fd 12 34 56  78 1b ae 68 9e 3d ad 38  |......4Vx..h.=.8|
00000020  f3                                                |.|

2026-10-09 01:28:5483.200.225.79to 63381/udpUnrecognisedFR

·x"v·{·4Vx·;·u·

payload bytes

00000000  01 b6 d2 78 22 76 bd 7b  02 00 ff ff 00 fe fe fe  |...x"v.{........|
00000010  fe fd fd fd fd 12 34 56  78 bc 8c f5 3b 01 cf 75  |......4Vx...;..u|
00000020  f9                                                |.|

2026-10-08 20:34:5390.17.5.255to 31242/udpSOCKS5FR

·4Vx·

payload bytes

00000000  05 00 ff ff 00 fe fe fe  fe fd fd fd fd 12 34 56  |..............4V|
00000010  78 08 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |x...............|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000080  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
... 512 bytes shown in part